ssh

Tailscale is investigating serious privilege-escalation vulnerabilities in Tailscale SSH that could allow authorized users to exceed their configured permissions, with a patched client release targeted by the end of October 27.

333 Tor exit nodes were hijacked via a compromised management server and the Ebury Linux backdoor, redirecting SSH traffic to attacker-controlled servers and stripping encrypted email ports to intercept plaintext messages.

333 malicious Tor exit nodes running the Ebury backdoor hijacked SSH connections to steal credentials and spread infection; after a researcher reported them, the Tor Project's network health team flagged them as BadExit and operators shut them down within days.

一篇教程博文，讲解如何在 macOS 上利用 Secure Enclave 和 Touch ID 创建不可提取的 SSH 身份密钥，并配置 SSH 与 GitHub 认证，同时深入解释其底层工作原理。

xtty 是一款面向日常 SSH 与编码代理工作的原生 macOS 终端，支持批量连接已保存主机、密码自动填充、sz/rz 文件传输、标签页与分屏、广播输入及编码代理状态显示，提供免费版与一次性 Pro 购买。

博主介绍开源工具 vps-security-hardening，可用一条命令远程自动化完成 VPS 的 7 层安全加固（SSH 检查、系统更新、禁 root 登录、改端口、fail2ban、UFW 防火墙、Docker 防火墙配置），免去手动加固半小时的繁琐流程。

Hugging Face staff introduced a new SSH-based trick (`ssh http://chat.hf.co`) that lets anyone access hosted models like Qwen3.8-27B for free, with no registration or API key, directly from any terminal with unlimited quota.

OpenSSH 10.6 (10.6p1) was released on 2026-10-06 with multiple security fixes, deprecation notices for scp -R and old-platform sshd support, and stricter username/path validation. The team highlighted a surge of AI-assisted security bug reports, noting AI-found bugs are independently rediscovered, so they will release more frequently to ship fixes faster.

tunnl.gg 提供基于 SSH 的稳定 localhost URL 隧道服务，免安装、无需账户，SSH 密钥即身份，可保持固定的公网 HTTPS 地址，适用于 webhook 与 OAuth 回调。

bawkterm is an open-source desktop client for SSH, SFTP, Docker over SSH and Remote Desktop, available on Windows and Linux and launched on Product Hunt.

A comprehensive guide for securing Linux servers, covering SSH hardening, firewall configuration with UFW, and intrusion detection using tools like Fail2Ban and CrowdSec.

Cline Desktop has added SSH support, allowing remote development where the app runs locally on a laptop while working on files and tools on remote machines like dev servers or Raspberry Pi devices.

Devin's virtual machine provides a development environment accessible via SSH, allowing users to treat it like a server across macOS, Linux, and Windows, with access to Devin's capabilities.

The article discusses security concerns with VSCode's SSH agent, comparing it to Emacs' Tramp and highlighting risks in development environments.

Cognition introduces new CLI and SSH access for Devin Cloud, enabling developers to manage AI coding sessions directly from the terminal and interact with a dedicated VM.

Devin introduces new CLI and SSH access methods for its cloud sessions, allowing users to create, manage, and resume sessions directly from the terminal and hand off work to local devices.

Sigabrt is a cronjob monitoring service that sends email alerts when scheduled tasks fail to ping, featuring an SSH terminal interface for status management.

Warpgate v0.29.0 is a release of a smart bastion host that provides transparent access to protocols like SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP, and VNC with features such as session recording, 2FA, SSO, and brute-force protection.

A demo showcasing a tool that connects to two SSH hosts and runs multiple agents and a terminal, emphasizing fast performance at 60/120 FPS.

Corv v1.1.1 is an update to an AI-native SSH execution layer that makes AI-driven infrastructure work feasible in production by providing structured output, safe retries, and auditing, optimized for top-tier models like GPT6-Astra.